Certificate transparency checks for unexpected certificate issuance

8844 views

                  import requests

response = requests.get('https://crt.sh/', params={'q': '%.example.com', 'output': 'json'}, timeout=15)
response.raise_for_status()
certs = response.json()
print(certs[:5])

Certificate transparency monitoring is cheap detection for a surprisingly important risk. If a certificate appears for a domain you own and you did not expect it, that deserves immediate investigation. I like monitoring this externally so it still works during internal outages.

Kai Nakamura

More from Kai Nakamura

Certificate transparency checks for unexpected certificate issuance

0 Comments

More from Kai Nakamura